Securing DNS (DNSSEC, DoH, LLMNR, NetBIOS, LMHOSTS) [Windows Server 2019] I (tobor), cover how to better secure DNS on Windows 10 devices as well as Windows Server 2019. If you like what you see please Subscribe! DoH BLOG Enable-DoH Cmdlet %20Cmdlets/ INVEIGH TOOL STARTUP SCRIPT 0:00 Intro Summary 0:30 Enable DNS over HTTPS (Enable-DoH) 2:52 Firefox Enable DoH 3:18 Cloudflare DNS 4:03 Chrome Enable DoH 5:07 NetBIOS Traffic 6:33 Danger of NetBIOS Demo (Inveigh) 9:44 Control Panel Disable NetBIOS and LMHOSTS 10:48 LMHOSTS File 11:29 Disabling NetBIOS in a Domain Environment 12:15 Disabling LLMNR in Domain Environment 13:08 Startup Script to disable LMHOSTS and NetBIOS 13:54 WMI vs CIM 15:50 Code Sign the Startup script 17:15 Zone Transfers on a DNS Server 18:28 Commands that are used to perform a zone transfer 19:31 DNSSEC Summary 20:06 Setting up DNSSEC 21:18 Enable Trust Anchors 22:13 DNSSEC test using Resolve-DnsName 22:55 Reverse Lookup and not setting up DNSSEC 23:18 GPO to have clients use DNSSEC 24:14 Subscribe or leave a comment View my Verified Certifications! Follow us on GitHub! Official Site Give Respect on HackTheBox! Like us on Facebook! View PS Gallery Modules! The . Security Package